org.apache.cxf.interceptor.security

Class DefaultSecurityContext

java.lang.Object

org.apache.cxf.interceptor.security.DefaultSecurityContext

All Implemented Interfaces:

LoginSecurityContext, SecurityContext

public class DefaultSecurityContext
extends java.lang.Object
implements LoginSecurityContext

SecurityContext which implements isUserInRole using the following approach : skip the first Subject principal, and then checks Groups the principal is a member of

Constructor Summary

Constructors

Constructor and Description
DefaultSecurityContext(java.security.Principal p, javax.security.auth.Subject subject)
DefaultSecurityContext(java.lang.String principalName, javax.security.auth.Subject subject)
DefaultSecurityContext(javax.security.auth.Subject subject)

Method Summary

Modifier and Type	Method and Description
protected boolean	checkGroup(java.security.acl.Group group, java.lang.String role)
javax.security.auth.Subject	getSubject() Returns the Subject representing the current authenticated user.
java.security.Principal	getUserPrincipal()
java.util.Set<java.security.Principal>	getUserRoles() Returns a set of Principals representing the roles assigned to the current authenticated user Principal
boolean	isUserInRole(java.lang.String role)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

DefaultSecurityContext

public DefaultSecurityContext(javax.security.auth.Subject subject)

DefaultSecurityContext

public DefaultSecurityContext(java.lang.String principalName,
                              javax.security.auth.Subject subject)

DefaultSecurityContext

public DefaultSecurityContext(java.security.Principal p,
                              javax.security.auth.Subject subject)

Method Detail

getUserPrincipal

public java.security.Principal getUserPrincipal()

Specified by:

getUserPrincipal in interface SecurityContext

isUserInRole

public boolean isUserInRole(java.lang.String role)

Specified by:

isUserInRole in interface SecurityContext

checkGroup

protected boolean checkGroup(java.security.acl.Group group,
                             java.lang.String role)

getSubject

public javax.security.auth.Subject getSubject()

Description copied from interface: LoginSecurityContext

Returns the Subject representing the current authenticated user.

Specified by:

getSubject in interface LoginSecurityContext

Returns:

the subject

getUserRoles

public java.util.Set<java.security.Principal> getUserRoles()

Description copied from interface: LoginSecurityContext

Returns a set of Principals representing the roles assigned to the current authenticated user Principal

Specified by:

getUserRoles in interface LoginSecurityContext

Returns:

the roles